gstreamer-plugins-good: heap buffer overflows [LWN.net]

Package(s):

gstreamer-plugins-good

CVE #(s):

CVE-2009-0386 CVE-2009-0387

Created:

February 6, 2009

Updated:

July 13, 2009

Description:

Multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov file that would cause an application using GStreamer to crash or, potentially, execute arbitrary code if played by a victim.

Alerts:

Gentoo	200907-11	2009-07-12
Ubuntu	USN-736-1	2009-03-16
Debian	DSA-1729-1	2009-03-02
SuSE	SUSE-SR:2009:005	2009-03-02
Fedora	FEDORA-2009-1213	2009-02-05
Fedora	FEDORA-2009-1343	2009-02-05
Mandriva	MDVSA-2009:035	2009-02-10
Red Hat	RHSA-2009:0271-01	2009-02-06

(Log in to post comments)